13474 matches found
CVE-2026-107444
A flaw in Katello allows for a cross-organization authorization bypass via the Docker Tags repositories API . Because the API fails to properly enforce organization scoping when listing repositories for a Docker meta tag, an authenticated user with permission to view products in one organization ...
CVE-2026-107444
A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when listing repositories for a Docker meta tag. An authenticated user with permission to view products in one organization may be able to retrieve repository metadata associated with...
[SECURITY] Fedora 44 Update: docker-buildx-0.37.2-1.fc44
Docker CLI plugin for extended build capabilities with BuildKit...
Fedora 44 : docker-buildx (2026-af9902ab5e)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-af9902ab5e advisory. - Update to release v0.37.2 - Resolves: rhbz2544198 - Resolves CVE-2026-56855: rhbz2530594 - resolves CVE-2026-78662: rhbz2530802 - Upstream fix...
PT-2026-108133
Name of the Vulnerable Software and Affected Versions Docker Sandboxes affected versions not specified Description Docker Sandboxes performed case-sensitive comparisons of OAuth token-endpoint hostnames when determining if managed credential responses should be masked, whereas request routing...
EulerOS 2.0 SP15 : docker-runc (EulerOS-SA-2026-3907)
According to the versions of the docker-runc package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : 'This is a PUBLIC release of a low-severity vulnerability in runc which\nhas been fixed in runc 1.3.6, runc 1.4.3, and runc 1.5.0-rc.3. There...
EulerOS 2.0 SP15 : docker-engine (EulerOS-SA-2026-3906)
According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privileg...
CVE-2026-101998: Not Failing Securely
Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affected handlers could forward unmasked bytes. Code inside an authorized sandbox could use this to recover host-managed OAuth access and refres...
CVE-2026-107444: Authorization Bypass Through User-Controlled Key
A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when listing repositories for a Docker meta tag. An authenticated user with permission to view products in one organization may be able to retrieve repository metadata associated with...
CVE-2026-105452: Exposure of Sensitive Information to an Unauthorized Actor
Docker Sandboxes could forward a client-supplied credential alongside a credential injected by the host egress proxy. The proxy removed alternate credentials only when their values matched known sentinel values, so untrusted code in an authorized sandbox could supply an unrecognized credential in...
PT-2026-107790
A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when listing repositories for a Docker meta tag. An authenticated user with permission to view products in one organization may be able to retrieve repository metadata associated with...
PT-2026-108104
Name of the Vulnerable Software and Affected Versions Malcolm affected versions not specified Description The upload-processing pipeline in scripts/safe-extract.py fails to apply entry-count, nesting-depth, and total-uncompressed-byte limits when processing single-stream compressed formats such a...
CVE-2026-105570: Improper Handling of Case Sensitivity
Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while request routing treated DNS hostnames case-insensitively. Untrusted code inside a sandbox could use a case-variant hostname to reach the genuine provider...
PT-2026-108132
Name of the Vulnerable Software and Affected Versions Docker Sandboxes affected versions not specified Description The egress proxy in Docker Sandboxes may forward client-supplied credentials along with credentials injected by the host. This occurs because the proxy only removes alternate...
PT-2026-108131
Name of the Vulnerable Software and Affected Versions Docker Sandboxes affected versions not specified Description Docker Sandboxes may fail open when masking credentials in protected proxy responses. This occurs when a response-body read returns data simultaneously with an error, causing affecte...
EulerOS 2.0 SP15 : docker-engine (EulerOS-SA-2026-3972)
According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privileg...
CVE-2026-92543
A flaw was found in Docker Engine. This vulnerability can lead to information disclosure or container image tampering by allowing an attacker to intercept unencrypted registry traffic. The flaw exists because the engine disables Transport Layer Security TLS certificate verification if any resolve...
AZL-107351 CVE-2026-92543 affecting package docker-compose 2.27.0-14
Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Becau...
AZL-107315 CVE-2026-92543 affecting package docker-buildx 0.14.0-17
Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Becau...
DEBIAN-CVE-2026-92543
Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Becau...